
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e28ca5a2-6b79-389e-b129-6a5d3e9c3f2a.roa
File: e28ca5a2-6b79-389e-b129-6a5d3e9c3f2a.roa (raw, json)
Hash identifier: qH1ud3GwLmxFutCSDaR4PvhFoMsRhH21McIlS0DbA3c=
Subject key identifier: 84:D6:90:0B:8D:95:A1:AE:C7:2D:6C:3E:A6:21:E8:F5:3E:43:D0:FA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4E7810F120100713D8E580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e28ca5a2-6b79-389e-b129-6a5d3e9c3f2a.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.61.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:78:10:f1:20:10:07:13:d8:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=1c478ad8-e9b5-4acf-aa5c-cec25d14f620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:d9:15:36:ad:11:f4:ec:a5:1a:e2:67:14:
d8:5f:fd:9b:fa:7e:dd:89:e7:e8:8e:ee:b3:51:ae:
7f:f5:c1:8f:a1:0b:d9:fa:b2:01:f0:cd:8a:7d:c2:
96:7e:68:5a:c4:8c:09:0d:8c:26:ae:63:db:51:d4:
06:d3:f9:67:e9:81:d8:88:47:33:f2:f1:d3:f9:dd:
5a:1c:1c:15:54:98:e0:cd:8a:6d:3b:f6:7e:d8:d5:
dc:e7:2d:1d:43:94:de:e9:fd:08:43:63:eb:02:90:
e8:e6:a6:4f:b2:03:d1:02:dd:f3:fd:21:16:69:0f:
54:ed:7b:d9:a1:41:36:34:65:70:be:9b:25:60:7b:
54:18:d5:6c:76:0f:18:43:0a:92:f9:29:d2:12:7c:
0c:d3:50:e8:29:3d:26:ad:ed:d9:19:60:06:b8:81:
32:e0:97:fe:3c:1e:f1:d3:74:71:6c:88:b2:6d:d3:
9e:38:1f:02:f4:88:ae:72:ff:67:84:a7:e0:fd:88:
f2:12:c0:55:ea:81:b6:42:66:c4:cc:3a:f4:c3:b2:
5c:d1:cf:80:e0:ad:8f:e4:bb:38:ed:24:b1:03:6e:
49:90:53:b2:9e:de:32:c7:a1:2e:7d:56:f9:50:d6:
dc:46:33:83:2b:fb:9b:30:66:27:2a:87:0f:d3:23:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D6:90:0B:8D:95:A1:AE:C7:2D:6C:3E:A6:21:E8:F5:3E:43:D0:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e28ca5a2-6b79-389e-b129-6a5d3e9c3f2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:c4:e3:8f:da:e9:a8:63:51:15:9c:44:97:2f:8c:d4:2e:f0:
d1:4c:5f:6f:41:2c:81:d7:04:0f:d2:31:98:25:3b:b1:77:5d:
47:57:b3:eb:1d:07:88:4a:87:e4:6e:38:78:b0:7f:97:57:75:
4a:ea:76:9c:43:ca:1e:94:eb:27:da:0d:db:a3:21:d1:5f:2a:
5e:43:18:1f:61:00:89:c5:d9:a9:34:c2:86:d6:6f:04:8e:6e:
1f:1e:5b:f5:a5:03:cc:b0:01:1c:3f:54:b2:d4:f7:25:a2:c5:
66:e9:9a:93:47:95:ae:ef:8a:7f:12:9f:7a:70:54:e8:d9:ab:
ea:72:92:1a:9a:1b:55:1e:e4:b8:26:f1:a1:07:9a:1b:f4:9e:
a9:41:72:dd:dd:95:08:63:b2:2f:f7:76:31:99:92:6b:5c:11:
00:5e:4f:25:44:7a:44:2f:12:3b:fc:d0:ae:08:88:cc:bc:a2:
62:8e:ba:f1:f4:66:46:7f:3f:40:d0:7f:40:26:d4:aa:85:03:
a1:10:b4:5b:d1:56:16:c3:42:8c:0b:be:45:97:df:53:46:dd:
90:f6:d0:e8:f3:55:00:aa:fb:29:3e:e3:83:11:65:f9:0f:aa:
cf:4e:0f:ab:b9:86:f4:3a:dc:a9:2a:7a:7a:1e:ac:bd:82:94:
04:05:72:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TngQ8SAQBxPY5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
MWM0NzhhZDgtZTliNS00YWNmLWFhNWMtY2VjMjVkMTRmNjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyHZFTatEfTspRriZxTYX/2b+n7diefoju6z
Ua5/9cGPoQvZ+rIB8M2KfcKWfmhaxIwJDYwmrmPbUdQG0/ln6YHYiEcz8vHT+d1a
HBwVVJjgzYptO/Z+2NXc5y0dQ5Te6f0IQ2PrApDo5qZPsgPRAt3z/SEWaQ9U7XvZ
oUE2NGVwvpslYHtUGNVsdg8YQwqS+SnSEnwM01DoKT0mre3ZGWAGuIEy4Jf+PB7x
03RxbIiybdOeOB8C9Iiucv9nhKfg/YjyEsBV6oG2QmbEzDr0w7Jc0c+A4K2P5Ls4
7SSxA25JkFOynt4yx6EufVb5UNbcRjODK/ubMGYnKocP0yP8UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITWkAuNlaGuxy1sPqYh6PU+Q9D6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTI4Y2E1YTItNmI3OS0z
ODllLWIxMjktNmE1ZDNlOWMzZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARD0eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTE44/a6ahjURWcRJcvjNQu8NFMX29BLIHXBA/SMZglO7F3XUdXs+sd
B4hKh+RuOHiwf5dXdUrqdpxDyh6U6yfaDdujIdFfKl5DGB9hAInF2ak0wobWbwSO
bh8eW/WlA8ywARw/VLLU9yWixWbpmpNHla7vin8Sn3pwVOjZq+pykhqaG1Ue5Lgm
8aEHmhv0nqlBct3dlQhjsi/3djGZkmtcEQBeTyVEekQvEjv80K4IiMy8omKOuvH0
ZkZ/P0DQf0Am1KqFA6EQtFvRVhbDQowLvkWX31NG3ZD20OjzVQCq+yk+44MRZfkP
qs9OD6u5hvQ63KkqenoerL2ClAQFcrk=
-----END CERTIFICATE-----
Generated at Wed Oct 21 21:31:33 2026 by rpki-client